Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
File: A24viOVshqQ2o8THq3cPp4vGhso.cer (raw, json)
Hash identifier: sh4xIcNS+bUD3Dged7s8a4iokvxMQxZDQMe8RLwf/+4=
Subject key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F49C467F04E3482AC5330B61B896854
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:35:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214501
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:49:c4:67:f0:4e:34:82:ac:53:30:b6:1b:89:68:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:c2:ee:cb:6d:a6:d4:fb:d4:27:f4:83:15:
4c:3c:48:6b:55:d8:4b:4b:da:b2:e6:c6:26:a9:87:
99:9e:00:41:8e:cc:79:71:49:31:22:fb:d7:53:e6:
10:52:66:55:8f:62:2d:f3:14:b2:e7:86:39:80:6a:
f2:e4:1c:32:10:c3:0a:e9:58:d2:86:68:48:eb:b6:
f4:c8:7a:85:b1:fe:6e:55:92:81:03:7f:15:9e:c5:
d2:8b:86:b7:fa:28:c4:7b:6a:53:cb:36:fa:9a:bd:
c1:41:54:05:3d:98:1a:37:12:25:35:b0:36:63:35:
16:f8:d8:49:9e:ae:08:19:aa:04:6a:59:44:1b:47:
4d:93:b7:df:db:17:61:35:ca:7d:91:18:ac:da:28:
22:d4:cd:23:a3:36:c0:fc:b5:48:17:2a:49:cf:59:
8a:8d:e0:c0:57:66:29:3e:e9:55:20:e8:74:3c:81:
46:22:73:c6:02:7f:8c:cb:d8:4a:29:53:a9:c4:56:
71:ce:0f:54:82:60:14:d3:9f:c3:f6:b0:4d:fe:7d:
bd:f1:47:6c:71:2d:c1:0d:ba:26:ba:5e:84:55:1d:
3c:52:f1:6c:56:9d:61:0a:0c:09:83:a8:1c:d6:fa:
69:3a:f8:3f:01:b4:d8:58:d3:98:92:ec:63:5d:77:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214501
Signature Algorithm: sha256WithRSAEncryption
61:74:d6:c5:1c:0c:21:f8:07:a1:65:fa:1d:22:3f:a6:4f:7d:
a9:dd:2d:be:41:12:49:a9:a3:dc:1d:03:cc:4f:53:20:25:51:
4b:d3:80:5c:75:df:ef:de:a6:6e:b1:ed:39:5b:3a:d4:74:f3:
b2:1d:91:13:3d:33:5a:a7:88:df:93:5b:89:b4:65:15:94:e3:
a7:bd:00:49:46:47:23:b9:23:7d:13:9e:50:f9:95:eb:81:28:
38:c3:aa:9d:3b:7d:bd:cf:2b:82:56:3a:83:5f:cf:e1:3e:8d:
73:b6:23:c0:9c:96:cd:49:d0:f3:8e:d3:b3:e9:46:5f:3b:aa:
01:7c:a3:43:7e:9c:8c:07:db:2e:35:1f:91:d2:84:6a:d1:e3:
fa:1d:71:eb:b7:be:2b:2d:1b:76:b3:85:97:9d:6b:4b:ae:fe:
05:90:dc:fd:e8:0d:e7:ab:79:a3:27:fc:72:9d:85:bc:6c:55:
28:1a:fa:c7:98:37:52:ae:cb:55:1f:44:e0:58:ff:af:65:16:
44:ac:3d:28:c3:ed:2f:0c:b7:d6:12:bc:1e:fd:ef:d9:f5:a3:
b4:8e:2c:1f:2d:17:73:4c:78:4b:00:4b:35:a3:6c:23:d3:34:
fb:98:fb:08:f4:78:52:ce:39:ec:83:78:8e:09:df:f3:7d:c8:
ad:5c:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:30 2025 by rpki-client